@ethisyscore/extension-runtime 1.59.0 → 1.61.0

package/dist/mock-host/cli.cjs

@@ -54,6 +54,50 @@ function createOffscreenCanvasTransfer(options) {
   return { offscreen };
 }
 
+// src/host/version-skew.ts
+var EXTENSION_VERSION_HEADER = "x-extension-version";
+var EXTENSION_ACTIVE_VERSION_HEADER = "x-extension-active-version";
+var CAPABILITY_REJECTION_REASON_HEADER = "x-capability-token-rejection-reason";
+var VERSION_MISMATCH_REASON = "extensionversionmismatch";
+function readHeader(headers, name) {
+  if (!headers) {
+    return void 0;
+  }
+  const direct = headers[name];
+  if (direct !== void 0) {
+    return direct;
+  }
+  const lowered = name.toLowerCase();
+  for (const key of Object.keys(headers)) {
+    if (key.toLowerCase() === lowered) {
+      return headers[key];
+    }
+  }
+  return void 0;
+}
+function trimmedOrUndefined(value) {
+  const trimmed = value?.trim();
+  return trimmed !== void 0 && trimmed.length > 0 ? trimmed : void 0;
+}
+function detectVersionSkew(response, mountedExtensionVersion) {
+  const reason = trimmedOrUndefined(readHeader(response.headers, CAPABILITY_REJECTION_REASON_HEADER));
+  if (reason !== void 0 && reason.toLowerCase() === VERSION_MISMATCH_REASON) {
+    return {
+      activeVersion: trimmedOrUndefined(readHeader(response.headers, EXTENSION_ACTIVE_VERSION_HEADER)),
+      detectedFrom: "rejection"
+    };
+  }
+  if (!response.ok) {
+    return null;
+  }
+  const mounted = trimmedOrUndefined(mountedExtensionVersion);
+  const served = trimmedOrUndefined(readHeader(response.headers, EXTENSION_VERSION_HEADER));
+  if (mounted === void 0 || served === void 0 || served === mounted) {
+    return null;
+  }
+  return { activeVersion: served, detectedFrom: "response-stamp" };
+}
+
 // src/host/worker/bridge-envelopes.ts
 var BRIDGE_PUSH_THEME = "ethisys:bridge:theme";
 var BRIDGE_PUSH_LOCALE = "ethisys:bridge:locale";
@@ -73,6 +117,9 @@ var WorkerRemoteDomTransport = class {
   workerPort;
   mcpClient;
   capabilityTokenProvider;
+  mountedExtensionVersion;
+  onVersionSkew;
+  versionSkewReported = false;
   coalesceMs;
   maxConcurrentMcpRequests;
   abortController;
@@ -95,6 +142,8 @@ var WorkerRemoteDomTransport = class {
     }
     this.mcpClient = options.mcpClient;
     this.capabilityTokenProvider = options.capabilityToken;
+    this.mountedExtensionVersion = options.mountedExtensionVersion;
+    this.onVersionSkew = options.onVersionSkew;
     this.coalesceMs = options.coalesceMs ?? 16;
     this.maxConcurrentMcpRequests = Math.max(
       1,
@@ -378,6 +427,34 @@ var WorkerRemoteDomTransport = class {
   requestSignal(id) {
     return this.inFlightAborts.get(id)?.signal ?? this.abortController.signal;
   }
+  /**
+   * Raises the skew callback the first time this surface is seen to be running against a version
+   * that is no longer installed.
+   *
+   * Latched deliberately. A page typically has several MCP calls in flight, and after an upgrade
+   * every one of them reports the same skew — firing per response would ask the host to remount
+   * the same surface repeatedly, and the second remount would tear down the first. One signal per
+   * transport is all a remount needs, and the transport is discarded along with the surface.
+   *
+   * The callback is host code, so it is assumed to be able to throw. Two consequences are guarded
+   * here: the throw must not escape into the MCP handler's catch (which would reply `ok: false`
+   * for a call that actually succeeded), and it must not consume the latch (which would leave the
+   * surface with no response AND no further chance of being told to remount).
+   */
+  reportVersionSkew(response) {
+    if (this.versionSkewReported || this.onVersionSkew === void 0) {
+      return;
+    }
+    const skew = detectVersionSkew(response, this.mountedExtensionVersion);
+    if (skew === null) {
+      return;
+    }
+    try {
+      this.onVersionSkew(skew);
+      this.versionSkewReported = true;
+    } catch {
+    }
+  }
   async handleInvokeTool(message) {
     let token;
     try {
@@ -397,6 +474,7 @@ var WorkerRemoteDomTransport = class {
         capabilityToken: token,
         signal: this.requestSignal(message.id)
       });
+      this.reportVersionSkew(result);
       this.safePostMessage({
         id: message.id,
         type: "ethisys:mcp:invokeTool:result",
@@ -426,6 +504,7 @@ var WorkerRemoteDomTransport = class {
         capabilityToken: token,
         signal: this.requestSignal(message.id)
       });
+      this.reportVersionSkew(result);
       this.safePostMessage({
         id: message.id,
         type: "ethisys:mcp:getResource:result",
@@ -456,6 +535,7 @@ var WorkerRemoteDomTransport = class {
         capabilityToken: token,
         signal: this.requestSignal(message.id)
       });
+      this.reportVersionSkew(result);
       this.safePostMessage({
         id: message.id,
         type: "ethisys:mcp:uploadDocument:result",